1 result · Clear filters · Feed
-
Medium 5.4
Omnom through 0.9.0 SSRF via Add Feed /add_feed Route
Omnom through 0.9.0 contains a server-side request forgery vulnerability that allows authenticated users to make server requests to arbitrary hosts by submitting feed URLs to /add_feed. Attackers can supply internal addresses that getFeedInfo, gofeed ParseURL…